I like the three strikes rule. Sometimes it just slips through. I got caught by a phishing link once because I had just gotten off the phone with a co-worker

I like the three strikes rule. Sometimes it just slips through. I got caught by a phishing link once because I had just gotten off the phone with a co-worker John and got an email 5 minutes later that said "hey James, it's John". Didn't even think twice about clicking it.